Privacy policy
What Scoutrank collects, why, who processes it on our behalf, how long it is kept, and what you can do about it.
What we collect
Account data: name, email, password hash, sign-in and confirmation timestamps. Workspace data: the websites you add (domain, crawled public pages, business facts you type), keywords, competitors, articles and their drafts, chat conversations with Scout, credit balance and its ledger. Technical data: IP address and browser string on each request for security and abuse prevention, error reports with a request id.
Why we process it
To run the service you signed up for (research, writing, publishing, tracking), to bill you, to keep the product secure (rate limits, fraud and bot prevention), to answer your support requests, and — if you agree to it — to attribute where you came from (partner links, advertising clicks). The legal bases are the contract with you, our legitimate interest in running a secure service, and your consent where we ask for it.
Who processes data on our behalf
Anthropic and OpenAI (language models that read your site data and write drafts), DataForSEO (search volumes, rankings, backlinks), Google (Search Console, Business Profile and Indexing, only for the accounts you connect), Stripe (payments; card data never touches our servers), Resend and Amazon SES (transactional email), Hetzner (hosting in Germany), Cloudflare R2 (encrypted backups), Sentry (error reports without personal data), Telegram (operational alerts to our team; may include a site domain), Replicate and Perplexity (images and research when a run asks for them). Each processes only what the task needs and under its own data-processing terms.
How long we keep it
While your account is active. Operational journals are pruned automatically: the activity feed after 30 days, model-usage logs after 180 days, chat history after 365 days, the audit log after 365 days, run artifacts after 180 days. Encrypted backups are kept 30 days. After you delete your account the workspace is removed within 24 hours; the billing ledger is kept as required by tax law, without the personal data it referred to.
Your rights
You can see and correct your data in the product, export everything in one archive (Account → Download my data), and delete the account yourself (Account → Delete my account, with a 24-hour window to change your mind). You can also ask us for access, correction, erasure, restriction or portability at privacy@noloss.io, and complain to your data-protection authority. We answer within 30 days.
Cookies and tracking
Scoutrank sets a session cookie and a theme cookie that the product cannot work without, and — only after you accept it on the cookie bar — a partner-attribution cookie and advertising-click identifiers. There is no third-party analytics script. The full list is in the cookie policy.
Security
All traffic is encrypted in transit, data at rest is on encrypted volumes, backups are encrypted before they leave the server, API keys and CMS credentials are stored encrypted and never shown again, and access to production is limited to the operator with two-factor authentication.
Changes and contact
We will announce material changes on this page and by email. Questions: privacy@noloss.io.
Data controller: the operator of Scoutrank (noloss.io). Data protection requests: privacy@noloss.io.
This document is written in English; translations are provided for convenience and the English text prevails.